MAL-2025-160361 Malicious code in messi-tueda-ghdfz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42832aafda374a5a277d5bbcd6f970727e8027a351d14b518c45980bdd6236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167285 Malicious code in teagood-nakamala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc1ffa54fd8cc2734afc3083459c892eb10fd089af6b1337057c6bf902f504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162096 Malicious code in nokiraifiagne-asaifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38032e6669ab327a3e0b34c2d15e419f2fa45ce97602f521231ab8b93510b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46388f1ba1ed241a41c449d760c8dbac3c945ec4b27604fe839c38aef819aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf451757a74c029e6eef4a2604e6cfefe5827808f17bda47bafa7d8775f53624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4e405d3f9a6d2b3581101bec0a83bf3d61b446cb1d3066c375ed59322583b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarag-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c62700e4449b89fbac91d4cd2c5e411a20dbe3c18aef06641e516c5660a5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecd7d8d67fa23b40e6b99cb2aad7cc26db6abaa73be0924c82324c2a074bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-unisakiauobaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49141f71c1a011273fa256d3f4fca6e629028e6cf6c8e98995486f1b35eca320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2447eb4b14c2e7978fb2df577e381c0f96c900ab72bc84b58e580a6beb81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/inuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cb92a00eda6ea4a3cb12e6d5c4ad6c94c250d88a66b828eb9d43ca074ae7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150977 Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154553 Malicious code in dian-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50671a67bce851c5090999c07f698b105f48c2a46cebe06c6a7ac0d9ab662be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166934 Malicious code in teagood-lokika67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93a1ede3d71ff8d9bc8ffd2af7134ff3931c4b078e388deaed016dca038599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151784 Malicious code in aciyuudua-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9a09805ef39f03178fe09b5cc6c1c543498bca0d10c5e2d3edb5ee21b95118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163164 Malicious code in nokire-nana13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3854898e275878369749e583aa2f066f6676b0608b4890ba078b31097439d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158942 Malicious code in maalasha-nut-ps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4591e761bc8706b939d80e45de474eaba171424edf3553fec0dd99d9c6a4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156077 Malicious code in icha-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8627f416efc31a2e59fdbf00d31d31a9369a3697ceb868346b455c962991bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163853 Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...